Chan, Elvis M. (SF) (FBI) 


From: Chan, Elvis M. (SF) (FBI) 
Sent: Tuesday, October 4, 2016 8:32 AM 
To: Rich, Patricia R. (SF) (FBI) 
Cc: Hammell, Delynn B. (SF) (FBI) 
Subject: Fwd: Follow Up 
FYI from DNC. 
Regards, 
Elvis 
Elvis M. Chan 
Supervisory Special Agent 
Squad CY-1 


San Francisco Division 

Federal Bureau of Investigation 
Work: 415-553-7605 

Cell: SEX 6196 


E-mail: elvis.chan @ic.fbi.gov 


-------- Original message -------- 

From: "Sussmann, Michael A. (Perkins Coie)" <MSussmann@perkinscoie.com> 

Date: 10/03/2016 8:12 PM (GMT-08:00) 

To: "Newell, Sean (NSD) (JMD)" <Sean.Newell@usdoj.gov> 

Ce: "Lai, Sarah (NSD) (JMD)" <Sarah.Lai3@usdoj.gov>, "Shih, Jeffrey (USACAN)" 
<Jeffrey.Shih@usdoj.gov>, "Chan, Elvis M. (SF) (FBI)" <Elvis.Chan@ic.fbi.gov>, "Hawkins, E. A. (WF) 
(FBI)” <Adrian.Hawkins@ic.fbi.gov>, "Milligan, Julissa L. (Perkins Coie)" <JMilligan@perkinscoie.com> 
Subject: Re: Follow Up 


Sean, 


We certainly can share information with you on a rolling basis. We hope to have some information for 
you later in the week. 


Regards, 
Michael 
Michael Sussmann Perkins Coie LLP 


P: 202.654.6333 
www.perkinscoie.com/msussmann 


From: "Newell, Sean (NSD)" <Sean.Newell@usdoj.gov> 
Date: Monday, October 3, 2016 at 12:13 PM 
To: Michael <msussmann @perkinscoie.com> 
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Cc: "Lai, Sarah (NSD)" <Sarah.Lai3 @usdoj.gov>, "Shih, Jeffrey (USACAN)" <Jeffrey.Shih@usdoj.gov>, "Chan, Elvis M. 
(SF) (FBI)" <Elvis.Chan @ic.fbi.gov>, "Hawkins, E. A. (WF) (FBI)" <Adrian. Hawkins @ic.fbi.gov>, "Milligan, Julissa L. 


(WDC)" <JMilligan@perkinscoie.com> 
Subject: RE: Follow Up 


Michael and Julissa, 


Good morning. | see that there may be another release of documents this week, maybe as early as tomorrow. 
Accordingly, | thought | would take that as an opportunity to check in on the first requests below. Would it be 
possible to do a rolling production? Happy to discuss further, if necessary. 


Thanks! 


Sean 


From: Newell, Sean (NSD) 

Sent: Tuesday, September 27, 2016 6:14 PM 

To: MSussmann@perkinscoie.com 

Cc; Lai, Sarah (NSD); Shih, Jeffrey (USACAN) (Jeffrey.Shih@usdoj.gov); Chan, Elvis M. (SF) (FBI) (Elvis.Chan@ic.fbi.gov); 


Hawkins, E. A. (WF) (FBI) (Adrian. Hawkins@ic.fbi.gov) 
Subject: Follow Up 


Michael, 


As discussed yesterday, | am writing to request an initial batch of items from your clients. For all victims, DOJ and FBI 
request the following: 


1. Any released files that are believed to be fake or modified and, if applicable, the original, unmodified file; and 

2. 24-36 released files that were not circulated outside each of victim organizations (e.g., the donor list that was 
mentioned during our meeting) and a preliminary indication as to whether any of these may have been 
modified. 


For DCCC only, we request access to data and/or employees that could speak to the two screenshots at the bottom 
of this e-mail as having been created from an amalgamation of files or directories on the DCCC network. We believe 
that DCCC and/or Crowdstrike may have looked into these screenshots between on or about September 2 and 6, 
2016. 


Finally, as Sarah mentioned during the meeting, some media reporting referred to an ongoing DNC effort to review 
documents to see if any had been “forged.” To close the loop on that, we pulled up the following from a USA Today 
article regarding the September 13, 2016 information release: “In response to that most recent leak, DNC interim 
chair Donna Brazile stated that their ‘legal team is now in the process of reviewing these private documents, and 
attempting to confirm their authenticity, as it is common for Russian hackers to forge documents.”” 

We'll provide the more comprehensive wish list by the end of the week. 

Thank you. 

Sean Newell 


Deputy Chief — Cyber 
Counterintelligence and Export Control Section 
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National Security Division 
U.S. Department of Justice 
(202) 532-4585 


Screenshot 1 
<< OLE Object: Picture (Device Independent Bitmap) >> 


Screenshot 2 
<< OLE Object: Picture (Device Independent Bitmap) >> 


NOTICE: This communication may contain privileged or other confidential information. If you have received it in error, please advise the sender by reply 
email and immediately delete the message and any attachments without copying or disclosing the contents. Thank you. 
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